Routes LLM and MCP traffic from coding agents through a gateway in your Tailscale network, with authentication by tailnet identity instead of shared API keys, plus spending limits and logs.
Use it now
Keep it with up to 9 other tools you're setting up, then share them all as one link.
Try this first
Ask your assistant, with Aperture by Tailscale connected:
- MCP Server Proxying
Use Aperture by Tailscale to aggregate tools and resources: ‹what you need›
- Tailnet Provisioning
Use Aperture by Tailscale to join a new application, service or machine to your tailnet: ‹what you need›
- Tailscale SSH Commands
Use Aperture by Tailscale to discover tailnet machines: ‹what you're looking for›
Connect it over MCP
Connect Aperture by Tailscale as an MCP server, following its setup instructions at https://tailscale.com/docs/aperture/get-started
Setup guide: tailscale.com/docs/aperture/get-started
Install the CLI
Install it as its own instructions say.
Setup guide: tailscale.com/docs/aperture/get-started
Call the API
Auth An API key from Tailscale
Setup guide: tailscale.com/docs/aperture/get-started
Compare
Press Compare to add it to the tray at the bottom of the window, then pick up to 2 others anywhere on the site.
- Access
- APIMCPCLI
- Auth
- API Key
- Skills
- 5
Skills
LLM Gateway
Routes requests from LLM clients to OpenAI, Anthropic, Google and other providers, injecting provider keys so users never handle shared API keys.
MCP Server Proxying
Aggregates tools and resources from remote MCP servers behind one /v1/mcp endpoint, with deny-by-default grants tied to Tailscale identity.
Coding Agent Launcher
Configures and launches coding agents such as Claude Code, Codex, Gemini CLI and OpenCode against the gateway with the alpha Aperture CLI.
Tailnet Provisioning
Joins a new application, service or machine to your tailnet through the built-in Tailnet connector, with an admin approving each new machine.
Tailscale SSH Commands
Discovers tailnet machines with Tailscale SSH enabled and runs shell commands on them through the built-in Tailscale SSH connector.
